Microsoft
AZ-204 · Question #494
You are building an application to track cell towers that are available to phones in near real time. A phone will send information to the application by using the Azure Web PubSub service. The data wi
The correct answer is D. WebHook-Request-Origin. https://learn.microsoft.com/en-us/azure/azure-web-pubsub/howto-develop- eventhandler#upstream-and-validation
Submitted by eva_at· Mar 30, 2026Connect to and consume Azure services and third-party services
Question
You are building an application to track cell towers that are available to phones in near real time. A phone will send information to the application by using the Azure Web PubSub service. The data will be processed by using an Azure Functions app. Traffic will be transmitted by using a content delivery network (CDN). The Azure function must be protected against misconfigured or unauthorized invocations. You need to ensure that the CDN allows for the Azure function protection. Which HTTP header should be on the allowed list?
Options
- AAuthorization
- BWebHook-Request-Callback
- CResource
- DWebHook-Request-Origin
How the community answered
(59 responses)- A15% (9)
- B7% (4)
- C3% (2)
- D75% (44)
Explanation
https://learn.microsoft.com/en-us/azure/azure-web-pubsub/howto-develop- eventhandler#upstream-and-validation
Topics
#Azure Web PubSub#CDN#webhook validation#WebHook-Request-Origin
Community Discussion
No community discussion yet for this question.